Data Protection & Rights
Overview
Summit College Preparatory School protects education records and personal information with clear policies, controlled access, and documented processes. We follow U.S. student-privacy standards under FERPA and respect applicable international frameworks, including GDPR and CCPA/CPRA. Families can read this page to understand rights, how we use data, and how to request access, correction, or deletion when the law allows.
FERPA (U.S.) – Rights for Students & Parents
Access. You may inspect and review education records within a reasonable period after we receive a request.
Amendment. You may request a correction if you believe a record is inaccurate or misleading; we explain the outcome in writing.
Consent. We do not disclose personally identifiable information from education records without written consent, except where FERPA authorizes disclosure.
Directory information. If we designate directory fields, we will publish the list and provide an opt-out process.
Complaints. Families can file concerns with the U.S. Department of Education. Reference: FERPA.
GDPR (EU/EEA) – Rights for Individuals in the EU
Scope. When GDPR applies, individuals have rights over personal data that relates to them.
Core rights. You may request access, rectification, erasure, restriction of processing, portability (when technically feasible), and object to processing based on legitimate interests or direct marketing. We will explain outcomes and lawful bases.
Children’s data. We obtain appropriate consents when required and keep educational records separate from public web systems.
Supervisory authority. You may lodge a complaint with an EU data-protection authority. We will cooperate with lawful requests.
Lawful Bases & Purposes for Processing
Educational services. We process data to provide live instruction, evaluate progress, issue grades, and maintain transcripts. This includes ILPs, portfolio evidence, and counselor reports.
Contract & legitimate interests. We process data to run secure platforms, schedule classes, and communicate with families. We document balancing tests where required.
Consent. We rely on consent for specific optional activities (for example, public recognition or publishing student work).
Legal obligations. We retain records and disclose information when laws or court orders require it.
Security of Education Records
Controlled access. We store records in Microsoft 365 with role-based permissions and version history. Public links are not used for academic files.
Live tools. We teach on Zoom Pro with secure invitations. When instruction requires recording, we give notice and restrict access; files are stored in OneDrive and scheduled for deletion per policy.
Vendor management. We evaluate service providers for security and confidentiality commitments and limit use to educational purposes.
International Data Transfers
Locations. Primary systems operate in the United States. If a processor stores data outside the U.S., we use appropriate transfer safeguards.
Safeguards. Where required, we implement Standard Contractual Clauses and additional measures recommended by regulators.
How to Make a Rights Request
Step 1. Write to the privacy contact with your full name, date of birth, relationship to the student, the right you wish to exercise (access, correction, deletion, restriction, portability, objection), and any supporting details.
Step 2. We acknowledge within one business day and explain verification steps. We may request additional information to confirm identity and protect student records.
Step 3. We respond within the time required by applicable law and provide outcomes in writing.
Contact. Email: admin@summithighschool.org · Phone: +1 (727) 339 7339
Related Policies & References
Registrar & Records: /registrar/ · Student & Parent Handbook: /student-handbook/ · Academic Model: /academic-model-instruction/ · FERPA (U.S. Dept. of Education): studentprivacy.ed.gov · GDPR (EU Commission): Data Protection · CCPA/CPRA (California): California Privacy Protection Agency